In 2.4.7 we do: JwtDecoders.fromOidcIssuerLocation(auth0Properties.issuer) as NimbusJwtDecoder with an issuer that retur...

Describe the bugBuild for spring-security fails with 1 unit test case failed Class org.springframework.security.config.w...

Updating to commons-codec 1.15 causes the following failureconvertWhenSamlResponseInvalidBase64ThenSaml2AuthenticationEx...

UpdatedWe should provide better error messages when an invalid user format is providedOriginalHenrik Sachse (Migrated fr...

Describe the bugOAuth2RefreshToken always sets expiresAt to null https://github.com/spring-projects/spring-security/blob...

In 5.5, gh-samples-url points to https://github.com/spring-projects/spring-security/tree/5.5.0/samples, but the samples ...

We use a custom AuthenticationFailureHandler in our saml2Login configuration and we would like access to the Response in...

SummaryRelyingPartyRegistration can be created from file or URL. But there is no way to create it from metadata xml stri...

The update of build conventions means the default docs server is correct, so we can remove the explicit setting of the h...

We need to update all active branches to use s01.oss.sonatype.org for publishing to Maven Central. See https://github.c...

The maven-metadata.xml contain <version>5.4.7</version>. More recent versions are missing. This leads to err...

Describe the bugSometimes, when I call a web service, I get a request cannot be null.Servlet.service() for servlet [disp...

Samples have been migrated to spring-security-samples project, but broken links point to old location, wiki. I corrected...

In #8996, authorizeHttpRequests(Customizer) was introduced.For consistency with the rest of the DSL, authorizeHttpReques...

For example, docs should refer to OpenSaml4AuthenticationProvider since OpenSamlAuthenticationProvider is deprecated.

SummaryWhen you use multiple sec:authentication-managers, you can't @Autowire the AuthenticationEventPublisher because e...

Describe the bugThis bug has been transferred from the Spring Cloud Gateway Forum. Please see the link to the bug here h...

Hi Team,Some days back I created a spring security issue (Issue No:9223) under spring projects,The URL is https://github...

I am trying to use this to get a token. @Beanfun webClient( clientRegistrations: ReactiveClientRegistrationRepository...

Since HeadersConfigurer#featurePolicy is marked as deprecated, it appears that the same should apply to HeadersDsl#featu...